Known Exploited Vulnerabilities March 25, 2022 · CISA KEV Catalog

CVE-2018-11138: Quest KACE System Management Appliance Remote Command Execution Vulnerability

The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance is accessible by anonymous users and can be abused to perform remote code execution.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2018-11138Quest

Related

CVE-2025-32975: Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability Known Exploited Vulnerabilities · Apr 20, 2026

Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026

U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026